Privacy policy

The data controller for personal data processed through LushyChat is the entity that operates the service. We identify it in product notices or in-product settings where required. For privacy requests, use the contact method we publish on this site or in the product.

Depending on how you use LushyChat, we may process:

• Account and authentication data. For example, if you sign in with a provider, identifiers and profile elements that provider shares with us under your consent and their terms.
• Profile and preferences. Information you choose to provide in onboarding or settings, such as display name or match preferences, as implemented in the product.
• Usage and technical data. Such as approximate location from your IP (for routing or compliance), device and browser type, timestamps, session identifiers, and diagnostic logs used to run and secure the service.
• Communications and safety data. Content or metadata we need when you report abuse, when we enforce policies, or when we are required to respond to lawful requests.

We do not use your personal information to sell lists of users to other companies for their own marketing.

We process personal information to:

• Provide, maintain, and improve LushyChat.
• Authenticate users and prevent fraud or abuse.
• Run matching, moderation, reporting, and blocking features.
• Meet legal obligations and respond to lawful requests.
• Send you service messages, such as security notices.
• Look at aggregate or de-identified usage to improve the product.

Where the EU or UK GDPR applies, we rely on appropriate bases. Those include: contract (providing the service you ask for), legitimate interests (security, fraud prevention, and product improvement, balanced against your rights), consent where required (for example, certain cookies or optional communications), and legal obligation.

We keep information only as long as we need it for the purposes above, including to resolve disputes, enforce agreements, and meet legal, accounting, or reporting requirements. Retention periods vary by data category. Some security logs may be kept longer in aggregate or pseudonymous form.

We may share information with:

• Service providers that process data for us under strict contracts (hosting, analytics, communication tools), only for the purposes we specify.
• Authorities when required by law or to protect rights, safety, and security.
• Corporate transactions. If we are part of a merger or acquisition, information may be transferred with appropriate safeguards in place.

We do not sell your personal information in the conventional sense.

If we move personal data across borders, we use mechanisms recognized by applicable law (such as standard contractual clauses) where required.

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may also have the right to file a complaint with a supervisory authority. To use these rights, contact us through the channels we provide. We may need to confirm your identity before we respond.

LushyChat is not aimed at people below the age required to use the service in their country. We do not knowingly collect personal information from children in violation of applicable law.

We will post updates on this page and update the effective date. We may flag material changes through the product or by email where it makes sense.

For how we think about session security and product safety, see Security.